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Claims 

What is claimed: 

A system tor P ro„* 9 — over a ^J^'r^Z 



1. 



3 



\5 



40 



A system Tor yiuv.u...y < 

communions Pipe, c—g a. 'east one « at leas, one PSa a. e 
one f,rs< remote computer system and a, ,eas, one subsequent remote computer 
system, 

said at least one client, further comprising; 

means for transferring incoming commands sent from said first remote 
computer system through said pipe to said PSD, 

means for transferring outgoing responses generated by said PSD to said 
first remote computer through said pipe, wherein said client is functional y 
connected to said PSD and said network and is funct.ona.ly 
communicating over said pipe with a first remote computer system; 

said at least one PSD further comprising; 

at least one embedded PSD authenticating means, 
means to respond to at least one incoming command, 
means to generate an outgoing authentication response, 

cryptography means for decrypting said incoming commands and 
encrypting said outgoing responses, wherein said PSD is funct.onai.y 
connected and is functionally communicating with said client and sa.d first 
remote computer system; 
said at least one first remote computer system further comprising; 

means of generating outgoing commands in a proper protocol for 
communicating with said PSD through said pipe, 
a first authenticating means for authenticating said PSD responses, 
cryptography means for decrypting said incoming responses and 
encrypting said outgoing commands, 
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passing and routrng means for herring auction challenges 
Lived over said network from said subsequent remote computer 
system to said PSD for authentication through said pipe, 
processing and routing means for transferring authentication responses 
Tcetved mrough said pipe from said PSD to said subsequent remote 
computer system over said network, 

wherein said fins, remote computer system is functionally connected to 
said network and is functionally communicating wfth said client and said 
PSD using said communications pipe; and 
said at least one subsequent remote computer system further comprising: 
means to generate authentication challenges. 

a second authenticating means for authentjcating responses received 
over said network from said PSD through said firs, remote compute 
system, Wherein said second remote computer system is functon^y 
connected to said network and is functionally communicating with said 
first remote computer system; and 

a, least one network wherein said network includes means for functionally 
connect and communicating with at least one client and one or more 
remote computer systems. 

A system for providing authentication over a network using a P-~< 
communications pipe, comprising at least one client, a. leas, one PSD, a. leas 
7m remote computer system and at leas, one subsequent remote computer 

system, 

said at least one client, further comprising; 

means for transferring incoming commands sent from said first remote 
computer system through said pipe to said PSD, 

means for transferring outgoing responses generated by said PSD to said 
first remote computer through said pipe, 
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and is functionally communing over sa.d p.pe v*t 
computer system; 
said at least one PSD further comprising; 

at least one embedded PSD authenticating means, 

means to respond to at .east one incoming command, 

me ans to generate an outgoing authentication response. 

means to transfer said authenticating means through said client to said 

first remote computer system, 

ane for decrypting said incoming commands and 
cryptography means for decrypt g funct ionally 

remote computer system; 
said a, leas, one first remote computer system further comprising; 

m eans o, general outgoing oommands in a proper protoco, tor 
communicating with said PSD through said p,pe, 
. « authen«ca 6 ng means for authentic*g said PSD responses, 
olograph, means tor decking said incoming responses and 
encrypting said outgoing commands, 

storage means tor stonng said authentic^ means transferred from said 
PSD, 

o ., c inn «?aid PSD authenticating means to 
. second aumen fi c*g ^ T^^^ remote computer 

pro ,de ^-'^:z:z:^^ « 

client and said PSD using said communications pipe; and 
said atteast one suPseauentremotecomputersystemfur^compdsing: 
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means to generate authentication challenges, 

a third abating means ,or authenticate responses received over 
aid network from said M remote computer system, wherem sad 
ZZ remote computer system is .nctionaily conned to said netwo* 
and is in .undone! communications with said firs, remote computer 

system; and 

at ,east one network wherein said networK includes means fo, functionally 
connecting and communing wlth a, leas, one client and one or more 
remote computer systems. 
The system according to Calm 1 or 2 wherein said communions employs an 

"According to Cairn 1 or 2 wherein said communions employs a 

secure protocol. 

The system acoording to Calm 1 or 2 wherein said cryptography employs 

asynchronous methods. 

The system according to Cairn 1 or 2 wherein said cryptography employs 

synchronous methods. 

A method for providing authentication over a network using a pre-estabiished 
communications pipe comprising; 

generating an authentic^ challenge on a first remote computer system in a 
proper format for processing by a PSD, 

encrypting said property formatted cha.ienge using a pre-eetablished 

cryptography method, 

transmitting said encrypted challenge through said pipe to said PSD. 

decrypting said encrypted challenge b, said PSD using said pre-established 

cryptography method, 

generating an authentication response by said PSD using said decked 
challenge and at least one internal PSD algorithm, 
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enc^ting said authentication response using said pre-established orography 

method, 

transmuting said encrypted authentication response through said pipe to said first 

remote computer system, and 

decking said enorypted authentication response by said firs, remote computer 
system using said pre-estabiished cryptography method and authentic- sa,d 
^ponse by said M remote computer system using a, ieas, one mternal 
authentication algorithms. 

The method according to claim 7, further comprising; 

redirecting subsequent authentication challenges received over said network to 
said first remote computer system, 

processing said subsequent authentication chaiienges In said proper format for 
processing by a PSD through said pipe, 

encrypting said property formatted chaiienge using said pre-established 

cryptography method, 

transmitting said encrypted challenge through said pipe to said PSD, 

decrypting said encrypted challenge by said PSD using said pre-established 

cryptography method, 

generating an authentication response by said PSD using said decrypted 
challenge and at least one internal PSD algorithm. 

encrypting said authenfication response using said pre-established cryptography 

method, 

transmitting said encrypted authentication response through said pipe to said first 

remote computer system, 

decrypting said encrypted authentication response by said firs, remote computer 
system using said pre-established cryptography method, and 
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routing said authentication response over said netwo* to said subsequent remo te 
Iputer system, authenticating said response by said subsequent remote 
computer system using at least one interna, authentication algonthms. 
The method according to ciaim 7 wherein said communications is an open 

protocol. 

The method according to Calm 7 wherein said communications is a secure 

protocol. 

The method according to claim 7 wherein said cryptography employs 

asynchronous methods. 

The method according to claim 7 wherein said cryptography employs 

synchronous methods. 

A method for providing authentication over a network using a pre-established 
communications pipe comprising; 

generating a PSD algorithm transfer command on a M remote computer system 
in a proper format for processing by a PSD, 

encrypt said properly formatted transfer command using a pre-established 

cryptography method, 

transmitting said en cypted command through said pipe to said PSD, 

decrypting said encrypted command by s,id PSD using said pre-esteblished 

cryptography method, 

copying said PSD algorithm into an internal memory location, 

encrypting said PSD algorithm using said pre-established cryptography method, 

transmitting said encrypted PSD algorithm through said pipe to said f.rst remote 

computer system, 

decrypting said encrypted PSD algorithm by said M remote computer system 
using said pre-established cryptography method and storing said PSD aigonthm 

in a secure location, 
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receiving at least one remote authentication challenge over said network from at 
least one subsequent remote computer system by said first remote computer 
system, 

generating an authentication response by said first remote computer system 
using said stored PSD algorithm, 

transmitting said generated authentication response over said network to said 
subsequent remote computer system, and 

authenticating said response by said subsequent remote computer system using 
at least one internal authentication algorithms. 

The communications pipe according to claim 13 wherein said communications is 
an open protocol. 

The communications pipe according to claim 13 wherein said communications is 
a secure protocol. 

The cryptography according to claim 13 wherein said cryptography employs 
asynchronous methods. 

The cryptography according to claim 13 wherein said cryptography employs 
synchronous methods. 



